11 Optional[String] $pg_hostname = "/run/postgresql",
12 Optional[String] $pg_port = "5432",
13 Optional[String] $caldance_version = undef,
14 Optional[String] $caldance_sha256 = undef,
15 Optional[Array] $cron_pip = [],
17 $password_seed = lookup("base_installation::puppet_pass_seed")
18 include "base_installation"
20 include "profile::mail"
21 include "profile::tools"
22 include "profile::postgresql"
23 include "profile::apache"
24 include "profile::redis"
25 include "profile::monitoring"
27 ensure_packages(["python-pip", "python-virtualenv", "python-django", "uwsgi-plugin-python"])
29 $caldance_app = "${home}/app"
30 $caldance_app_old = "${home}/app_old"
31 $caldance_app_tmp = "${home}/app_tmp"
32 $pg_password = generate_password(24, $password_seed, "postgres_caldance")
33 $secret_key = generate_password(24, $password_seed, "secret_key_caldance")
34 $socket = "/run/caldance/app.sock"
36 $uwsgi_path = "${home}/virtualenv/bin/uwsgi"
37 $python_path = "${home}/virtualenv/bin/python"
41 "DB_USER" => $pg_user,
42 "DB_PASSWORD" => $pg_password,
43 "DB_HOST" => $pg_hostname,
44 "DB_PORT" => $pg_port,
45 "SECRET_KEY" => $secret_key,
47 "LOG_FILE" => "$home/caldance.log",
48 "MEDIA_ROOT" => "$home/media",
55 file { $caldance_app_tmp:
56 ensure => "directory",
60 require => User["$user:"],
63 ensure => "directory",
67 require => User["$user:"],
69 file { "${home}/media":
70 ensure => "directory",
76 exec { "initialize_venv":
78 require => User["$user:"],
79 command => "/usr/bin/virtualenv ${home}/virtualenv",
80 creates => "${home}/virtualenv",
83 archive { "${home}/caldance_${caldance_version}.tar.gz":
84 path => "${home}/caldance_${caldance_version}.tar.gz",
85 source => "https://release.immae.eu/caldance/caldance_${caldance_version}.tar.gz",
86 checksum_type => "sha256",
87 checksum => $caldance_sha256,
91 username => lookup("base_installation::ldap_cn"),
92 password => generate_password(24, $password_seed, "ldap"),
93 extract_path => $caldance_app_tmp,
94 require => [User["$user:"], File[$caldance_app_tmp]],
96 exec { "py-requirements":
97 cwd => $caldance_app_tmp,
99 environment => ["HOME=${home}"],
100 command => "/usr/bin/sed -i -e '/GDAL/d' requirements.txt && ${home}/virtualenv/bin/pip install -r requirements.txt --upgrade",
101 require => User["$user:"],
104 exec { "stop uwsgi application":
105 command => "/usr/bin/systemctl stop caldance-app.service || /usr/bin/true",
106 require => [User["$user:"]],
112 environment => ["HOME=${home}"],
113 command => "/usr/bin/rm -rf $caldance_app_old && /usr/bin/mv $caldance_app $caldance_app_old && /usr/bin/mv $caldance_app_tmp $caldance_app && /usr/bin/mkdir $caldance_app_tmp",
114 require => [User["$user:"]],
117 file { "$caldance_app/manage.py":
121 content => template("role/caldance/manage.py.erb"),
124 Archive[ "${home}/caldance_${caldance_version}.tar.gz"],
127 file { "$caldance_app/manage":
131 content => template("role/caldance/manage.sh.erb"),
134 File["$caldance_app/manage.py"],
135 Archive[ "${home}/caldance_${caldance_version}.tar.gz"],
138 file { "$caldance_app/app.ini":
142 content => template("role/caldance/app.ini.erb"),
145 Archive[ "${home}/caldance_${caldance_version}.tar.gz"],
149 cwd => $caldance_app,
151 environment => ["HOME=${home}"],
152 command => "$caldance_app/manage migrate",
153 require => [User["$user:"], File["$caldance_app/manage"]],
157 cwd => $caldance_app,
159 environment => ["HOME=${home}"],
160 command => "$caldance_app/manage collectstatic --no-input",
161 require => [User["$user:"], File["$caldance_app/manage"]],
164 exec { "restart uwsgi application":
165 command => "/usr/bin/systemctl restart caldance-app.service",
166 require => [User["$user:"], File["$caldance_app/app.ini"]],
170 profile::postgresql::master { "postgresql master for caldance":
171 letsencrypt_host => $web_host,
175 postgresql::server::db { $pg_db:
177 password => postgresql_password($pg_user, $pg_password),
180 # pour le script de génération de mdp
181 ensure_packages(["perl-digest-sha1"])
183 ensure_packages(["postgis", "python-gdal", "ripgrep"])
184 file { "/usr/local/bin/ldap_ssha":
188 source => "puppet:///modules/base_installation/scripts/ldap_ssha",
189 require => Package["perl-digest-sha1"],
192 sudo::conf { 'wheel_nopasswd':
194 content => "%wheel ALL=(ALL) NOPASSWD: ALL",
195 require => Package["sudo"],
198 ensure_packages(["mod_wsgi"])
199 class { 'apache::mod::wsgi':
200 wsgi_python_home => "${home}/virtualenv",
201 wsgi_python_path => $caldance_app,
202 require => Package["mod_wsgi"],
204 class { 'apache::mod::authn_file': }
205 class { 'apache::mod::authn_core': }
206 class { 'apache::mod::authz_user': }
207 class { 'apache::mod::auth_basic': }
208 class { 'apache::mod::proxy': }
209 apache::mod { 'proxy_uwsgi': }
211 apache::vhost { $web_host:
214 manage_docroot => false,
216 ssl_cert => "/etc/letsencrypt/live/$web_host/cert.pem",
217 ssl_key => "/etc/letsencrypt/live/$web_host/privkey.pem",
218 ssl_chain => "/etc/letsencrypt/live/$web_host/chain.pem",
219 require => Letsencrypt::Certonly[$web_host],
220 proxy_preserve_host => true,
224 url => "unix:$socket|uwsgi://caldance-app/",
226 no_proxy_uris => [ "/media/", "/static/" ],
231 path => "$caldance_app/main_app",
232 require => "all granted",
235 path => "$caldance_app/www/static",
236 require => "all granted",
239 path => "$home/media",
240 require => "all granted",
241 options => ["-Indexes"],
245 provider => "location",
246 require => "valid-user",
247 auth_type => "Basic",
248 auth_name => "Authentification requise",
249 auth_user_file => "$home/htpasswd",
255 path => "$caldance_app/www/static/",
259 path => "$home/media/",
262 default: * => $::profile::apache::apache_vhost_default;
265 file { "/etc/systemd/system/caldance-app.service":
269 content => template("role/caldance/caldance-app.service.erb"),
270 require => File["$caldance_app/app.ini"],
272 service { "caldance-app":
277 cron::job { "list_outdated_pip_packages":